Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the fifu_api_debug_posts() function in allCheck if you run itEPSS 0.29%Sep 26, 2025
- Medium4.9The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_posts_with_internal_featured_image() function in all versions up to, and includinCheck if you run itEPSS 0.33%Sep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- None0.0Not usedOpen the advisorySep 26, 2025
- Medium4.3The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20.Check if you run itEPSS 0.20%Sep 26, 2025
- Medium6.4The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple fields in versions up to, and including, 1.20.0 due to insufficient input sanitizCheck if you run itEPSS 0.26%Sep 26, 2025
- Medium5.3The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8.Check if you run itEPSS 0.37%Sep 26, 2025
- Low2.7The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to unauthorized access due to an incorrect capability checkCheck if you run itEPSS 0.22%Sep 26, 2025
- Medium6.4The Mega Elements – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Timer widget in all versions up to, and includCheck if you run itEPSS 0.24%Sep 26, 2025
- Medium4.3The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12.Check if you run itEPSS 0.17%Sep 26, 2025
- Medium6.4The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7Check if you run itEPSS 0.20%Sep 26, 2025
- Medium6.4The CM Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cmbd_featured_image' shortcode in all versions up to, and including, 1Check if you run itEPSS 0.24%Sep 26, 2025
- Medium5.1A security flaw has been discovered in MuYuCMS up to 2.7.Check if you run itEPSS 0.40%Sep 26, 2025
- Medium6.9A vulnerability was determined in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40.Check if you run itEPSS 0.37%Sep 26, 2025
- Medium5.3A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1.Check if you run itEPSS 0.41%Sep 26, 2025
- Medium5.3A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09.Check if you run itEPSS 0.31%Sep 26, 2025
- Medium5.3A vulnerability was determined in YunaiV yudao-cloud up to 2025.09.Check if you run itEPSS 0.31%Sep 26, 2025
- Medium5.3A vulnerability was detected in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 26, 2025
- Medium5.0Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring.Check if you run itEPSS 0.20%Sep 26, 2025
Sort